bd5fcc5f66bc8fa892fb83fcd60cd359_JaffaCakes118 | Triage

Sharing

General

Target

bd5fcc5f66bc8fa892fb83fcd60cd359_JaffaCakes118
Size

340KB
MD5

bd5fcc5f66bc8fa892fb83fcd60cd359
SHA1

a707fcc7c5f4b864d0b990e791a21b1ddb7f92ff
SHA256

e7c1c9008e276b39d58ff3ead332087fb1f2e6a32cc3604d86aaf1c45a4a4d6b
SHA512

05215a7b28fd626b6a930b1e897d6203bef577b1a17811f40617f2bc9e45767a97498baee130001f66de7a788fa2e82fc6b8b61034e58c98d906f62c3d201ddc
SSDEEP

6144:3gtKdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4Pydm5/t/81:B1tUM5aV/oLOVfhaa9ZpVe561

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd5fcc5f66bc8fa892fb83fcd60cd359_JaffaCakes118

Files

bd5fcc5f66bc8fa892fb83fcd60cd359_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5246110259d6f6766d8987d00dc8587

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetACP
FreeEnvironmentStringsA
GetModuleHandleA
CloseHandle
lstrlenA
DeleteTimerQueue
LoadLibraryExA
HeapCreate
GlobalUnlock
FindClose
GetConsoleCP
LocalFree
GetLastError
GlobalLock
GetStdHandle
GetDriveTypeA
MapViewOfFile
IsBadReadPtr
CreateFileA

user32

SetFocus
GetSubMenu
CheckMenuItem
GetParent
RedrawWindow
GetMessageA
GetDlgItem
IsMenu
GetDlgItemTextA
ClipCursor
CreateWindowExA
EndDialog
DialogBoxParamA
DrawIconEx

apphelp

SdbCloseDatabase
ApphelpShowDialog
SdbFindFirstTag
ApphelpCheckIME
ApphelpCheckRunApp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ